The documentation for Splunk Enterprise Security versions 8.0 and higher have been rearchitected from previous versions, causing some links to have redirect errors. For documentation on versions 7.x and earlier, see Splunk Enterprise Security 7.x documentation.
This documentation does not apply to the most recent version of Splunk® Enterprise Security.
For documentation on the most recent version, go to the latest release.
Fixed issues
| Date resolved | Issue number | Description |
|---|---|---|
| 2024-11-06 | SOLNESS-47686 | Square brackets fail on CMS Parsing |
| 2024-11-05 | SOLNESS-46727 | Capability tag_notable_events(associated with ES component "Tag Notable Events") is not added to any roles on ES search head |
| 2024-10-29 | SOLNESS-46669 | Threat Intel data retention issues |
| 2024-10-25 | SOLNESS-47267, BLUERIDGE-12937 | Spunk ES Post install configuration page has references to correlation search, Notable, Risk |
| 2024-10-23 | SOLNESS-45992, SOLNESS-48049 | Threat intelligence feed facing download issues with POST configuration errors |
| Date resolved | Issue number | Description |
|---|---|---|
| 2024-11-06 | BLUERIDGE-12950 | Pagination is sometimes not visible on the Analyst Queue due to findings on other pages being selected |
| 2024-11-04 | BLUERIDGE-11468, SOLNESS-40830, BLUERIDGE-13359 | The "Top Notable Events" panel on the Security Posture dashboard doesn't properly link to the Analyst Queue (the filter for "rule name" is not properly applied) |
| 2024-11-04 | BLUERIDGE-11658 | Analyst Queue doesn't always recover from a search error and instead shows a spinner (implying the search is still running) |
| 2024-11-04 | BLUERIDGE-13304 | ID appears to change when loading the Response Plan on a duplicate Investigation |
| 2024-10-31 | BLUERIDGE-12593 | Saving a note before image upload completes breaks the image preview and does not successfully upload the image |
| 2024-10-29 | BLUERIDGE-13191, BLUERIDGE-13185 | Add a check to see if mc_investigations is ready for convert_pre_es_convergence_incidents_mod_input |
See also
For fixed issues in Splunk SOAR (Cloud), see Fixed issues for Splunk SOAR (Cloud).
Last modified on 06 February, 2025
| Release notes for Splunk Enterprise Security | Known issues |
This documentation applies to the following versions of Splunk® Enterprise Security: 8.0.1
Download manual
Feedback submitted, thanks!